Another Person Comes Forward with Alleged WhatsApp Spyware Attack

A new victim has emerged in the WhatsApp spyware campaign allegedly perpetrated by Israeli company Paragon, which has sparked outrage among human rights activists and immigrants’ organizations.

Luca Casarini Speaks Out

Luca Casarini, a co-founder of the Italian non-governmental organization Mediterranea Saving Humans, which helps immigrants, has come forward with allegations that he was targeted by the spyware campaign. Casarini had previously told TechCrunch that he had received a notification from WhatsApp alerting him to the suspected spyware attack.

Complaint Filed with the Prosecutor’s Office

During a press conference organized by Sandro Ruotolo, an Italian member of the European Parliament, Casarini stated that he had filed a complaint with the Prosecutor’s Office in Palermo, Italy, regarding the alleged hack. Casarini’s goal was to find out who targeted him and his organization.

"We Don’t Have Anything to Hide"

Casarini emphasized that his organization had nothing to hide and that those who spy have a lot to hide. His statement echoes the sentiments of previous victims, including Beppe Caccio, the co-founder of Mediterranea Saving Humans.

Previous Victims Speak Out

Prior to Caccio, three other people have also come forward, saying they received a notification from WhatsApp about being among the around 90 people targeted with spyware made by Paragon. The other three victims include Francesco Cancellato, the director of news website Fanpage.it; Husam El Gomati, a Libyan activist living in Sweden, who works on immigration issues relating to Italy and Libya; and Casarini.

WhatsApp’s Initial Response

News of the spyware campaign broke on January 31, when WhatsApp said it had disrupted the campaign and notified around 90 people who had been targeted. WhatsApp did not attribute the campaign to a particular government, nor has Paragon revealed which government customer was behind the campaign.

Italian Government Denies Involvement

The Italian government denied involvement in the hacking campaign. In a press release, the Italian prime minister’s office stated that legally protected subjects, including journalists, were not targeted by Italian intelligence services.

Additional Targets Across Europe

In the same press release, the Italian government said that Meta told it there were other targets in Austria, Belgium, Cyprus, Czech Republic, Denmark, Germany, Greece, Latvia, Lithuania, the Netherlands, Portugal, Spain, and Sweden.

Austria’s Response

A spokesperson for the Austrian Federal Ministry of the Interior told TechCrunch that the Paragon attacks are known to its local authorities, but declined to provide more information.

More Victims Come Forward

During the same press conference attended by Casarini, David Yambio, the co-founder of the Italy-based NGO Refugees in Libya, said that he had also been targeted by a spyware campaign. Yambio stated that he wasn’t targeted through WhatsApp, but was notified by Apple about a "mercenary spyware attack" on November 13.

Conclusion

The ongoing investigation into the WhatsApp spyware campaign remains ongoing, with neither Paragon nor a spokesperson for the Italian government responding to TechCrunch’s requests for comment. The number of victims continues to grow, highlighting the need for greater transparency and accountability in the face of such malicious activities.

Get in Touch

If you have more information about Paragon Solutions and this spyware campaign, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email lorenzo@techcrunch.com. You can also contact TechCrunch via SecureDrop.